$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa File: f1da8eef-2bc0-3710-a530-fd8280e346c5.roa (raw, json) Hash identifier: POugxV6S+CBsUeRtQv9KhYADLXPsbdtSfr5exXQ15x8= Subject key identifier: 63:67:61:BC:8A:4C:39:CE:0E:BB:38:11:49:AC:59:8A:DD:7E:24:A7 Certificate issuer: /CN=d50d9265-ed86-4e53-88b9-cd56c607704f Certificate serial: 010D0C9F4328584A5B95B21C9CA2C464F495F080 Authority key identifier: 00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 400438 IP address blocks: 2606:afc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b2:1c:9c:a2:c4:64:f4:95:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50d9265-ed86-4e53-88b9-cd56c607704f Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=3d6df981-a432-4cdc-8c05-e2d18a7abb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:f9:9a:60:d3:ae:75:26:e7:10:bc:21:4f: 75:b0:e3:43:ef:e6:fd:6e:a2:24:2c:9b:65:47:0d: cb:de:bd:13:04:b0:8a:3e:b0:b9:4f:6b:67:73:c2: 7a:33:ce:24:3b:cf:2d:49:93:70:7a:a2:62:98:89: d1:fe:5c:db:e9:b0:69:76:1c:a7:da:6e:82:a7:6c: 9c:e6:c4:7a:20:26:69:7f:79:6d:cd:b6:13:38:1b: e2:4b:29:b9:ab:a5:f3:ac:f9:7e:c4:95:f0:b1:32: 8d:c7:32:a1:34:8c:9e:47:86:45:b7:15:14:72:30: 12:0d:49:e7:54:95:ff:1d:98:f3:85:bd:55:3c:98: 2d:8e:8f:bf:17:33:35:f6:38:b1:49:99:1d:ad:9c: 8b:96:d4:f7:5f:46:54:ad:c3:26:0f:47:a3:58:49: 8b:3f:2b:6d:fd:8b:58:97:c3:24:19:c5:ed:3d:ed: 3e:d5:a2:44:20:b5:c6:92:66:f2:ad:c3:d0:8f:99: b1:9d:7a:41:e1:70:08:c5:89:ea:b8:0d:ed:60:7e: 64:35:3c:2b:fd:c2:4a:c0:c5:79:5e:91:b2:9b:23: 96:59:3a:69:6c:1e:90:07:56:a7:74:a3:c9:19:dd: 99:a6:d0:88:96:a7:db:00:49:fa:1a:93:09:4b:32: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:67:61:BC:8A:4C:39:CE:0E:BB:38:11:49:AC:59:8A:DD:7E:24:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl X509v3 Authority Key Identifier: keyid:00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer sbgp-ipAddrBlock: critical IPv6: 2606:afc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:82:f9:82:70:9c:53:6d:ce:60:23:3d:51:0e:26:5b:52:9a: 1c:69:91:99:79:a1:e0:ac:8e:c6:32:7f:7b:7d:83:1a:8d:76: 98:ef:f2:cd:d6:38:e4:7d:74:73:e1:5f:35:a0:f4:49:d7:c2: 8a:a0:12:84:25:2e:74:60:55:84:f7:44:d5:0a:12:f6:f5:df: 4f:0c:ff:62:11:e5:5f:54:bd:28:d5:bf:2b:5f:55:29:26:1e: 5f:8f:8f:c2:6b:d2:09:64:6f:8f:ef:dc:7f:84:21:06:2f:95: d7:1f:80:f1:36:9c:a9:15:00:ac:b6:3b:d6:b3:f4:da:c9:5b: 7c:f3:ce:bf:5d:2d:32:0d:da:9b:36:1b:e0:7c:58:a1:30:6a: 8d:08:06:b1:e2:cb:e1:e2:8f:5a:6a:7b:e7:d6:91:b4:5a:a2: e4:a8:25:9b:55:98:3a:e2:8f:1d:3e:33:64:db:33:b1:6b:61: cd:11:fd:be:5d:9e:28:70:5c:5f:c0:9f:6a:3b:a2:c3:cf:6d: e9:4e:3b:29:1d:64:93:c4:41:c4:0d:ae:15:10:ab:8f:5e:db: 26:49:b5:1a:98:ff:61:f4:4f:1b:82:8d:22:54:cf:52:16:8c: 26:c4:12:20:ea:73:96:c6:2b:34:3a:ae:94:4e:c7:06:cb:c9: c3:d2:b2:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpblbIcnKLEZPSV8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUwZDkyNjUtZWQ4Ni00ZTUzLTg4YjktY2Q1NmM2MDc3 MDRmMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk M2Q2ZGY5ODEtYTQzMi00Y2RjLThjMDUtZTJkMThhN2FiYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkz5mmDTrnUm5xC8IU91sOND7+b9bqIkLJtl Rw3L3r0TBLCKPrC5T2tnc8J6M84kO88tSZNweqJimInR/lzb6bBpdhyn2m6Cp2yc 5sR6ICZpf3ltzbYTOBviSym5q6XzrPl+xJXwsTKNxzKhNIyeR4ZFtxUUcjASDUnn VJX/HZjzhb1VPJgtjo+/FzM19jixSZkdrZyLltT3X0ZUrcMmD0ejWEmLPytt/YtY l8MkGcXtPe0+1aJEILXGkmbyrcPQj5mxnXpB4XAIxYnquA3tYH5kNTwr/cJKwMV5 XpGymyOWWTppbB6QB1andKPJGd2ZptCIlqfbAEn6GpMJSzJM1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGNnYbyKTDnODrs4EUmsWYrdfiSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTBk OTI2NS1lZDg2LTRlNTMtODhiOS1jZDU2YzYwNzcwNGYvZjFkYThlZWYtMmJjMC0z NzEwLWE1MzAtZmQ4MjgwZTM0NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDUwZDkyNjUtZWQ4Ni00ZTUzLTg4 YjktY2Q1NmM2MDc3MDRmL2Q1MGQ5MjY1LWVkODYtNGU1My04OGI5LWNkNTZjNjA3 NzA0Zi5jcmwwHwYDVR0jBBgwFoAUAD5IHJ8853ianmehop2S7BelUjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTBkOTI2NS1lZDg2LTRlNTMtODhiOS1jZDU2 YzYwNzcwNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgavwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClgvmCcJxTbc5gIz1RDiZbUpocaZGZeaHgrI7GMn97fYMajXaY7/LN 1jjkfXRz4V81oPRJ18KKoBKEJS50YFWE90TVChL29d9PDP9iEeVfVL0o1b8rX1Up Jh5fj4/Ca9IJZG+P79x/hCEGL5XXH4DxNpypFQCstjvWs/TayVt8886/XS0yDdqb NhvgfFihMGqNCAax4svh4o9aanvn1pG0WqLkqCWbVZg64o8dPjNk2zOxa2HNEf2+ XZ4ocFxfwJ9qO6LDz23pTjspHWSTxEHEDa4VEKuPXtsmSbUamP9h9E8bgo0iVM9S FowmxBIg6nOWxis0Oq6UTscGy8nD0rKK -----END CERTIFICATE-----Generated at Wed Jul 2 10:39:37 2025 by rpki-client